Sign-in without MFA from service account (SMTP AUTH)

Assign this alert to yourself to see the evidence and start investigating.